Oracle issues out-of-cycle patch for flaw

By Jeremy Kirk, IDG News Service | Security, Oracle, patches Add a new comment

August 06, 2008, 9:11 AM — Oracle has released an emergency patch for a flaw the company issued a rare security alert for last week.

Administrators should not apply the work-arounds the company previously recommended and apply the patch, Oracle said.

The vulnerability lies in the Apache plugin for the Oracle WebLogic Server and Express products (formerly known as BEA WebLogic), both application servers.

The flaw can be remotely exploited and result in an attack that can compromise "the confidentiality, integrity and availability of the targeted system," according to the company's advisory.

The flaw was given a 10.0 score -- the most serious rating -- on the CVSS scale (Common Vulnerability Scoring System), a framework used to evaluate the risks of a particular flaw.

In the three years since Oracle started a regular patch cycle, the Apache plugin flaw is the first one to cause the company to release an off-cycle warning.

Jeremy Kirk is London correspondent at the IDG News Service and reports on security; chips; Microsoft Europe.

Add a comment

Canonical aligns Kubuntu as community flavor

6 comments
Google agrees to court order in India to remove content

4 comments
How to kill Web trackers dead

3 comments
MegaUpload takedown didn't slow pirate downloads, just moved them offshore

3 comments
Even after rewrites, Google Wallet retains gaping security holes, mainly due to Android

3 comments

Older
|
Newer

ITworld LIVE

Dale Henderson has shared Your hobbies can help your career on Linked In.
Dale Henderson has shared 7 places to step outside your comfort zone and get promoted on Linked In.
Dale Henderson has shared Value of IT certifications on Linked In.
Dale Henderson has shared Don't like your job, define one you like on Linked In.
Dale Henderson has shared 6 great social media jobs within IT on Linked In.
Dale Henderson has shared What’s on your laptop can be career limiting on Linked In.
Dale Henderson has shared 6 great social media tips for techies on Linked In.
Dale Henderson has shared It’s ok to say 'No' on Linked In.
Dale Henderson has shared 5 great jobs and 6 great company startup ideas for people with Search Engine Optimization (SEO) skills on Linked In.
Dale Henderson has shared The Future: Hipsters reflect on Social Media on Linked In.
User Dale Henderson is following keithshaw
Dale Henderson has shared Will Do Not Track kill the “free” Internet? on Linked In.
Dale Henderson has shared Ubuntu, Debian top community poll on Linked In.
Dale Henderson has shared PC Era says, 'I'm not dead yet. Getting better.' on Linked In.
Dale Henderson has shared Netflix pays $9M to settle user-data misuse charges; aims to misuse more data with Facebook on Linked In.
Dale Henderson has just joined ITworld
SarahADowney commented on Will Do Not Track kill the “free” Internet?
SarahADowney has just joined ITworld
LR_Morley_tw94930093 has just joined ITworld
Michelle Lee commented on Pickpocketing Google Wallet on Android phones
Michelle Lee has just joined ITworld
Debojyoti Das commented on Xbox emulation on Windows 8? Don't bet on it
Debojyoti Das has just joined ITworld
Sudip Kar answers How much difference is there between Mac OS X Lion Server and Snow Leopard Server?
rhager answers Friday fun: What's your guilty pleasure?
Hoizebomodone has just joined ITworld
tonys3kur3 commented on Sourcefire debuts anti-malware software FireAMP for enterprise
tonys3kur3 commented on Survey: Security deployments, training reduce cyberattack wipeouts, downtime
theDjTricky_tw20779374 commented on Windows 8: The 10 biggest problems so far
theDjTricky_tw20779374 has just joined ITworld

SecurityWhite Papers & Webcasts

White Paper

Overcome Top 7 Admin Challenges of Active Directory

As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable, enforceable processes that reduces administrative overhead and enables robust, customizable reporting and auditing capabilities. Brought to you by NetIQ.

White Paper

Insiders Can Ruin Your Company. Take Action.

Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in organizations worldwide. This white paper from NetIQ, discusses key technology solutions that help to prevent and detect insider threats.

White Paper

Streamline Compliance and Increase ROI

Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will help your business gain the maximum return on investment possible while aligning your compliance programs.

White Paper

X-Ray of the PCI Process-4 Proactive Steps

This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into creating a compliant and secure IT environment. Follow these four proactive steps now before your next audit. Brought to you by NetIQ.

See more White Papers | Webcasts